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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims 

1 . (Currently amended) A method for facilitating credit card transactions over a 
telecommunications network without disclosing a credit card account number , 
comprising the steps of: 

receiving from a merchant via the telecommunications network an encoded 
temporary d e siring to r e c e iv e authorization for a transaction with a us e r having on 
account with a cr e dit card issu e r, a transaction authorization number for an e-commerce 
transaction, said temporary transaction authorization number having been generated by a 
user having an account with a credit card issuer, wherein said temporary transaction 
authorization number comprises multiple fields of encryp ted and information regarding 
the transaction; 

retrieving secret information required to decode said multiple fields of 
information shar e d with a transaction authorization numb e r g e n e rator utiliz e d by th e us e r ; 
and 

matching decoded fields of information with corresponding transaction 
information provided by the merchant, and thereby verifying the temporary authorization 
transaction numb e r by using th e shar e d s e cr e t information and information regarding th e 
transaction without disclosing the credit card account number via the 
telecommunications network to the merchant . 

2. (Currently amended) The invention of claim 1 wherein th e s e cr e t information 
furth e r compris e s a cr e dit card numb e r the corresponding transaction information 
provided by the merchant includes a name and/or address associated with the user. 
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3. Currently amended) The invention of claim 1 wherein the temporary 
authorization number is-a includes an additional encrypted message authentication code 
generated from the multiple fields of information regarding the transaction using the 
secret information as a cryptographic key. 

4. (Currently amended) The invention of claim 1 wherein the temporary 
authorization number is includes a one-time encrypted password generated from the 
har e d s e cr e t information provided by the user and/or the credit card issuer . 

5. (Currently amended) A method for facilitating credit card transactions over a 
telecommunications network based on authentication information provided by a user 
having an account with a credit card issuer , comprising the steps of: 

r e c e iving auth e ntication information from a us e r having an account with a cr e dit 
card issu e r; and 

generating offline a temporary authorization number for the user using based on 
secret encoding and encryption information shared with -a- the credit card issuer ; 

wh e r e by sending via the telecommunications network to an e-commerce merchant 
from the user the temporary authorization number may b e containing the authentication 
information in multiple encoded fields of encrypted information utilized in a credit card 
transaction without disclosing a credit card account number via the telecommunication 
network to the merchant; and 

obtaining via the telecommunications network a verification from v e rifi e d by the 
credit card issuer based on a comparison of the fields of encrypted information in the 
temporary authorization number using th e shar e d s e cr e t information and with 
corresponding information regarding the transaction provided by the merchant . 

6. (Currently amended) The invention of claim 5 wherein the secr e t information 
furth e r compris e s a cr e dit card numb e r associat e d with th e us e r which is also us e d 
multiple encoded fields of encrypted information include as the authentication 
information at least one of the following: transaction amount, counter, date information. 
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computer location of encryption key, concatenated string, seed value, instance number, 
credit card number, credit card issuer, merchant . 

7. (Currently amended) The invention of claim 5 wherein the secret information 
is utilized as a cryptographic key to decrypt the multiple fields of information regarding 
the transaction encoded in the temporary authorization number. 

8. (Currently amended) The invention of claim 5 wherein the temporary 
authorization number is-a includes an additional encrypted message authentication code 
generated from the multiple fields of information regarding the transaction using the 
secret information as a cryptographic key. 

9. (Currently amended) The invention of claim 5 wherein the temporary 
authorization number is includes a one-time encrypted password generated from the 
har e d s e cr e t information provided by the user and/or the credit card issuer . 

10. (Original) The invention of claim 5 wherein the temporary authorization 
number has a format similar to a credit card number. 

1 1 . (Currently amended) A processor readable medium containing executable 
program instructions for performing a method on a device comprising the steps recited in 
claim 1 ofe 

r e c e iving auth e ntication information from a us e r having an account with a cr e dit 

card issu e r; and 

g e n e rating a t e mporary authorization numb e r for th e user using s e cr e t information 

stor e d on th e d e vic e and shar e d with a cr e dit card issu e r wh e r e by th e temporary 
authorization numb e r may b e utiliz e d in a transaction and v e rifi e d by th e cr e dit card 
issu e r using th e shar e d s e cr e t information r e garding th e transaction . 

12-16. (Cancelled) 
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17. (Original) The invention of claim 1 wherein the secret information is utilized 
as a cryptographic key to decrypt information regarding the transaction encoded in the 
temporary authorization number. 

18. (New) The invention of claim 1 wherein the temporary transaction 
authorization number has a format similar to a credit card number. 

19. (New) The invention of claim 1 wherein the multiple encoded fields of 
encrypted information in the transaction authorization number include at least one of the 
following: transaction amount, counter, date information, computer location of 
encryption key, concatenated string, instance number, seed value, credit card number, 
credit card issuer, merchant. 

20. (New) The invention of claim 1 1 wherein the multiple encoded fields of 
encrypted information in the transaction authorization number include at least one of the 
following: transaction amount, counter, date information, computer location of 
encryption key, concatenated string, instance number, seed value, credit card number, 
credit card issuer, merchant. 

21 . (New) The invention of claim 5 wherein the corresponding transaction 
information provided by the merchant includes a name and/or address associated with the 
user. 
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